libxc: check length on string copy (strcpy -> strncpy).

Signed-off-by: Christoph Egger <Christoph.Egger@amd.com>

diff --git a/tools/libxc/xc_dom_boot.c b/tools/libxc/xc_dom_boot.c
index e26941f7378a036d88b5a30778dbdb47c248c6ec..30906ee993de2e923ebe083a3253d862dd1b1268 100644 (file)
--- a/tools/libxc/xc_dom_boot.c
+++ b/tools/libxc/xc_dom_boot.c
@@ -92,7 +92,9 @@ int xc_dom_compat_check(struct xc_dom_image *dom)
     char *item, *ptr;
     int match, found = 0;
 
-    strcpy(xen_caps, dom->xen_caps);
+    strncpy(xen_caps, dom->xen_caps, XEN_CAPABILITIES_INFO_LEN - 1);
+    xen_caps[XEN_CAPABILITIES_INFO_LEN - 1] = '\0';
+
     for ( item = strtok_r(xen_caps, " ", &ptr);
           item != NULL ; item = strtok_r(NULL, " ", &ptr) )
     {